Alert suppression


I have few servers in a specific role and each server create an event in application log when certain error occurs. I want to create an alert when that event get created and suppress it for that server for next 3 day.  if i create a query like below


Event | where Source == "Monitoring" | where EventID  == 8888


It will create the alert for each server but if i also configure suppress alert, it will suppress the alert for all servers for next 2 days


Any help will be highly appreciated.

0 Replies